skills/resciencelab/opc-skills/banner-creator/Socket

banner-creator

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: The stated purpose is coherent, and local file writes/cropping are proportionate for banner creation. The main risk is supply-chain and credential-routing through a transitive skill/tooling chain (`nanobanana` -> Belt CLI) instead of a direct official Gemini integration; that raises trust concerns but does not show confirmed malicious behavior in this skill itself.

Confidence: 89%Severity: 58%

Audit Metadata

Analyzed At

Sep 15, 2026, 06:52 PM

Package URL

pkg:socket/skills-sh/resciencelab%2Fopc-skills%2Fbanner-creator%2F@227ba50a525e888d11d956f1eafa9a2e0b3326127cdffa6070fdb766c08a9b2b